mail-v22.bitbucket.io
Category: Phishing
- Don't sign in or pay here. Close it. If you typed a password, change it where you normally use it.
- Already visited? Check your device. A free scan shows whether anything was installed.
- Stop the next one. Combo Cleaner's web protection blocks phishing and scam sites before they load.
Combo Cleaner is PCrisk's own anti-malware tool, owned by RCS LT. Free to scan; removing what it finds needs a licence (7-day free trial).
Description of mail-v22.bitbucket.io
This domain appears to be a page hosted on Bitbucket Pages, a static hosting service operated by Atlassian. The subdomain name "mail-v22" and the page title "Mail" suggest it is presenting itself as a webmail-related login page rather than a full corporate website or public service portal.
Based on the screenshot, the page contains a minimal sign-in form labeled "Webmail" with fields for email and password and a "Verify it's you" prompt. There is no visible company branding, legal information, navigation, or supporting content that would normally help identify a legitimate mail provider or organization behind the page.
Safety Assessment for mail-v22.bitbucket.io
The scan results show limited automated detection activity: 1 out of 92 security engines flagged the domain, while malware scanning reported no flagged files and major threat databases did not list the site at the time of this scan. The domain itself is relatively old, which can sometimes reduce risk, but age alone does not establish legitimacy.
The more notable concern is the page content and context. This is a login-style page hosted on a developer-oriented static hosting platform, using a generic "Webmail" label and asking for email credentials without clear ownership or service identification. That pattern may be consistent with credential-harvesting or impersonation-style pages, especially when paired with a low-traffic, unranked subdomain and minimal site content.
Based on available data, no malware payloads were detected at the time of this scan, but the page's purpose and presentation may pose potential risks to visitors, particularly if they are asked to enter account credentials.
Technical Description
The site uses a valid SSL certificate issued for the hosting environment and is served through Atlassian infrastructure on an AtlassianEdge web server, with hosting attributed to Atlassian Network Services. DNS is backed by AWS nameservers, and DNSSEC appears to be unsigned. The certificate status suggests encrypted transport is in place, although the exact TLS protocol details were not provided in the scan.
From a security perspective, the main concern is not the transport layer but the application context: a very simple credential form hosted on a static platform with no visible organizational verification. No malicious files, external links, or iframes were identified in this scan.
Share your experience with this website. Was it safe? Did you encounter any issues?